Provides a visual representation of a user requesting access to a Privileged Azure Role. Just in Time access insures that Privileged accounts are only used when absolutely needed. You can also optionally designate Approver(s) to approve or deny privileged account requests. Lastly, Access Reviews allow Administrators to Audit Privileged Access use, and then determine if access to still necessary or needs to be Revoked or tweaked.

1. User signs into Azure and goes to Eligible Roles.
When they attempting to activate an Administrator
Role, you will be required to Authenticate using MFA,
and the request is sent for approval by a designated
Person:
(Manager, PIM Administrator, Global Admin, etc)
Roles Provide Access to Specific Resources
and Applications
Request-Reply
Access Reviews are used to review and manage a user's
access to Privileged Roles.
After completing the review, the reviewer can continue to grant
access or revoke access to the Privileged Role.
This insures that Privileged Roles arent being abused or
unnecessarily assigned.
Approve or
Deny?
Privileged Identity Management sends emails when the
following events occur for Azure AD roles:
- When a privileged role activation is pending approval
- When a privileged role activation request is completed
- When Azure AD Privileged Identity Management is enabled
Privilege Identity Administrator
Billing Administrator
D365 Administrator
Teams Communications Admin
Security Administrator
Usage Report Reader
Azure
Azure Resource
Group
VM
Azure AD Privileged
Identity Management
Manager
Access Review
Azure DevOps
Azure SQL
database
Privileged Identity Management(PIM)
Just in Time Access
Role Granted
Multi-Factor
Authentication
Request
Approved